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Abstract of JP 2003108527 (A) 

PROBLEM TO BE SOLVED: To provide a method 
and a system for allowing an SIP client and an SIP 
proxy to authenticate each other by incorporating a 
Cerberus security mechanism into a message flow 
of signaling operation based on a session initiation 
protocol. SOLUTION: When receiving a request 
message such as an INVITE request from the SIP 
client, the SIP proxy sends a challenge message for 
indicating the necessity of authentication based on 
Cerberus in response to this message. The SIP 
client sends a second request message having a 
proxy authorization header including authenticating 
data including a Cerberus server ticket to a proxy in 
response to this message so that the proxy can 
authenticate a user of the client. 
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(54) [5!W0>«8;] ^7^7>S •^D^^|8llcDfc»C-fey>'3>''fr:v'X-->3>^ , nh3;W)J^xxh^5/-b 
(57) DS»] 

■3< S/^t U y^^b-^a yfc—>*7a-E 
^;l/^ax^aUr^li#f%ll«AA/e\ S I 
^7yr-tS I P7n*$/*<ffi5EIg|Et*<:i:*'>ri£ 
E 1" 5 ££*5 «t tf ->X r A 5 o 

[*St¥g] I N V I T E 'J ?XX r-ftt*<Dl> 7XX 
My-fe-v^S I vtv^jyvfr^mzt. S 
I pyo+MiCftEfSgLT, y;l/^nXEltJ<^ 

£3 0 CtiEffiSLTS I P*5i*7>'Mi, 7*0*5/ 
EWt5y^nx-9--/^^7 h*$trBSEr-*% 
"a" hti proxy authorization^ -v9 




(2) 
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(SIP) 77^7>r-©3.— tf^iSUt^/cfetc, S 

- * nff w^^^ t § 3 y - * wmwxh -> 

X. MIBXr-ym 

buES I P*7-Y7>hfr?)lgl£>y£x7.My-t:- 

MBS? 1 <D U ^xx h y 7 -fe— >'#\ MfB S I P * ?-< 
7yhco^-VZmilt5rcib<DWM.T~5Z3/vX^ 10 

mmmx&zz t*f§*tz?- Yztts?* vy 

'J 1 7 -fe - i?% m £> X r 7 7 £ , 
S«^nrcEliE/aha;Wc^oTBuES I P75^7 
yh©:i-^MiETSfc&«l!IiET-£%#typ r o 
xy-author i zat i o n'Vy £"£^tyS 2 © 
y*x*M7-tr—>*;HulES I P^7^7>h^?>§ 

mR%2<DV t y-t-i?<Op roxy-aut 

h o r i z a t i o n^7£*©4>©EiIr-2£{£ffll, 20 
Tiuias I P^77^7>hOa— tf"^EIiEt§XT7 7 a 

[tmm2] mm \ icEm<Duy\d^-^mmw 
xhiTs Mia^ifc<to r ^2© , j^xxhy7-t-y 

tfS I P INVITED 7X7. hT$)§ C £J£W$Lb 

t^y^^-^mmWo 

Xh-oX, fyfBS 1 P^7-f7Vb©a— f'OlglBCjjIc, 

ijjitcm^ iuis^2ou^xxh^7-b-^ tute 
y ^ix h- t 7-tz-^©4 3 Tigij^n^ScH?nrcif aa 30 

UfcfCSS S I P ->^t U y^S§{cgiMt^7.r 7 7" 
£llfrr 3 /c&O n y e a - 2 lift £ e. fc*r 

-fu h nyl/T^ 0 > fijIB proxy — author i z 
a t i 0 n^y$<V$<DWM.T-Zfts SulBS I P/p 
*vK77*XT3fc&©7Vl/^nX+r-/<;f-^7 h£ 

ft 0 40 

[11*55] mm4icEm<Duy¥z-tuimm» 

X$>?X, luIBKliE7.T7 7 t >b\ ^^nx^ri/a-;!/ 
^B?t>*ffibTMIB^;l/^n7>-9--/^^7 r-©t?M£ 
fi7^t5Xf'y7^ tufBy;V^nx^-/W7 

h^e., tutas 1 ftyjjyhtmmzwzmt 

z>-tvi/By*-zmz&tZ7-y7'£Z$isc 

mit^y^^-^mm. 
[!M6] mm 1 {aa«<Dnyb-a-^5iM!«<* 

t'^ot, BuIBp roxy-authorizatio 
n's»;¥<D$><DBM.T-$t>\ SufBS I PtyJJyh 50 



<N?F*12 0 0 3-1 08 527 
2 

zz-ab, mtey£i.-$<v$mmwii\ mibs i 
yjjyhmms i p7u*i/mmtz<Dicmt 

^HufBS I P7n*i/<omt£T-tZ%tSp r o x y- 
authentication informatio 
n^7£*£Wt£/7-fe-^S\ MIBS I P^7^7> 

[Ig*«7] Il^fl l (cfatonyif a-*nJS!jt{* 
T'JoT> MIBjM^?nrcKiiynh3;l/^NTLM7 P 

(S I P) ^v47yYiS\ S I P?*n Lfc-fe 
7->ay<DM&fcM!LTifiIBS I P^5^7>h<Da 
— «f*idffiS I P7n*5/£ttLTKiE-rsxry:/* 

MtT * fctt03 > t£ a - * Hfr Btt&S»^% * ^ > 

m&imcm%% 1 ©y *xx m 7-t-^fctuiB 
s i p-7u*i/\cm%XTv7'ts 

tas i p^a*^saienrc, tmifi&mttsct 

«B jjVT 8 f - 1 U > ^ 7 -b - S?***IR 5 X f 7 7 

8fci6©if,flr— ^^#0 proxy-author i 
z a t i o n'N'y^IitSXf'^t, tJEflKS? 
tlfc proxy — author i zat i on'Vy 

h ^ 7 -b-^JiS Xf 7 7 1 A 8 c t 1 1 

^y^^-mmmWo 

t^ot, Huia^ i ts&vns 2 cd u *xx h ^ 7 t-s; 

^SIP INVITED $X7ihX*%>Z>£t%¥fWik 

t^y^a.-^mmWo 

[««JH10] II*JS8{ClB«c©3>b°a-^PJK^ 

X/d hn;l/Tfe0v BtilBp roxy — author i 
z a t i o n^7^<Dcp©SllIx-^*\ huIBS I P7* 
n*v/t7^-tXt5fci6cDy;l^<nX'9— /W7 h 

C»*«il] li*«8(cfB«03yea-^pJB!j« 
ttT'$ot> MIBp roxy — authorizati 

x h d t*a-->3 y-by^-^stijia^^nx-y--/ 5 ; 

^ 7 h m® 1 5 Xf 7 fmtS C t * 8 3 



(3) 

3 

JiftTJ&oT, MIBp roxy — authorizat 
i on'N'?^ MISS I P 5 v 4 7 y Y twMS I P 
7n*$/fc©IH©«5BIE©V ?xx Y*mT-$* 

MIBil 2©'J £xx h ?« 7 -b- VlZtitZti&t LTM 
IBS I P^D+->*>6CaF^yfe-S?*S»«*^ry 
ft. 

was** y ■fe-SWfcSSnS p r o x y - a u t 
hentication information^ y 

MIBS I P/D+->©BSEr-*«ffif tB-r^ 10 
ry7£> 

MIB proxy — authentication in 
formatio n^y£>&fi*tHLfclMES I P7 
n*y©BIEr-£t;:SoVTMiBS I P:/n 

Writ* t e> iztts c i: 4: t * 3 > K a - * WS! 
KTfc-aT. MIBS I P?7J7>ht>\ 

mmiRznrzWii-fu h 3;ucfto tme s i p ?^ 20 

7 y h CD x— »f zmtt Z> Tztb <D3l—9W8Et- $ Z 

MIBS I pyn^Mclgf Zktbiz, WEx-1f*B 
tI1-£fc&©BIlT-££#t? proxy-autho 
rizati on'N'y^ftSREG I STEMy 
■b— >*£MES I P7n**K:i3&«*s*Ty71:** 

fft 5 fc * © 3 > tf a - * H17 2 5 K *tt 5 

iii5:#®tt53ye i -^Dj^j«ft„ 
[»*«14] 3(cIB*03ye i -^5I^ 
JSEttTfcoT, MB«R«nftBK^oh3^^;l^ 30 
nx7a flfflEa— !f©BBT-*ff, 7 

;l/--snX*-T -TX h U If >by£-fre>Btf# 
Lfc, MIBS I P7n*->jc7*-bx-r*fci&©fr;l/'< 
nx-9— M7ry hZ&tT-f&tGct&mtt 
53>^a-^pJ0!^o 

bi*s 1 5 ] »$« 8 icibi© 3 > e a - * mm 

ttt^oT> BuIBjM^*n/cEiI^nhn;WNTLM 

[11^16] t7i/aW:^l->3^Pl-3 40 
;KS I P) yu*i/t)\ ±<y*/aymb*'*\s-*sB 
VOIBICS I P^7-Y7yhOa— tf^EffitSfti&O 

MiBs i pyy-f'7:/r-fre>iii©y7xxMy-b- 

MIB^l©'JyxxMy-b— MIBS 1 P 

7 y h ©a— «f*BBE 1 5 It *b<DWM.T- 5 A/T?v * 

f4 0 7 Proxy Authentication 
Requ i r edj Xf— *W-F*40^7t- 50 
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v^MIBS I PtyJ7yhlC£?T. B§Etf£>§T*& 

MIBS I P^7^7>h©a— »f%BSEt5fci60a- 
1f BSE r— proxy — authorizat 
i o n 'vy ^ £tf % 2 © 'J *xx h / y -b- ->*£MIB 
S 1 PtysfTyhfrb&imZZTyfUibvT. M 
Ea-»fBSET-*a\ MIBS I P7*a*i4c7*-bX 

tyxry7i:, 

ME7/l^nx-9— Wrv r-£<0BLTMIBS I Py 
5'f7yhOa— «f4BBU MIBS I P^5-Y7>h 

^DX-9— /Wry h*^fttffit^ry^i:» 
MIB3? 2 ©U ?XX h- * y MIB I N V I T E 

s i Pi/p+vymmc&mzzTvT'tmz.z 
ummi 7] m*ki 6icE*©*Bre*oT. M 

IBS! 1 J; tf g 2 © u 7XX h * 7 SIP I 

NV I TE'J^xxhTfcSCfcfcftafct 
OfcRSll 8] ffi$£l 6fcKK©£ii?*oT\ M 
IB^2©'J ^iXf^'vb-Wdp r o x y-a u 
t h o r i z a t i o n^7 £"©11117— £ A\ MIBS 
I Pyy^7yMMIBS I P7 , u*i/t<Dffl(DftZ.m 
a*g#-f3r-*%S*, JWESifctf, MIBS I P? 
7-T7>r^MIBS I pya+^SBBEt^OEffiffl-r 
5BSE7— ^^CcNS proxy — authentica 
tion i n f o r m a t i o $' f kM~$ <M y 
■b-^MIBS I Py5^7>h(C3i-rXT77^$?) 

;l/ (S I P) ^y47yht)\ S I P7n*->£/rLfc 
■by->3y©MJ&EiBJiLTMS5S I Py5^7>h© 
a— if SUES I P7n*~>fcWLTEIiEt5fcJ6©73 

*H«*iftif ttLffelcWtSS 1 ©'J ^xx y-t- 
->*^MIBS I P7D*->EiM^Xry7t, 
MIB^ 1 ©'J £xx h^t -y-b-; y*KWf5(SSi: UTM 
IBS I P7n^>{c<fcyiMe>ft/c, BIiE/)^S7$>5C 
S f - + U>">*^ y -fe- V*%im% X r y 7 

Mlfia-nf ^eHE-f § fc*©a— yBHr- * **tr p 
roxy — author i zat ion^y $%:W$k~t 
5Xf7/P*?T, MIBa— »f EEr- £ tf. MIBS 
I P7D+->E7^-bX-r-5fc«)©^^nX-9— 
7y h^gtr-^^tfXry7i:, 
MIBii^? tl/c proxy — author i zat io 

© 7XX h ^ y -b— >*%iM5 Xr y 7t 5 C t 
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mm 2 o ] mm i 9 icimvm-eh ?x,m 

Ifip roxy — author izatio n^7 

mm 2 1 ] M*9 1 9 CE«0*ST* oT, M 
ISp roxy — authorizatio n'vy^Ht 
#r**ry77><* SufBS I PtvJTVhtltiGS I 
P7°n^yt<DP^Dffl5EH<9U*xXr-£\ fulBp r 
oxy — authorizatio n'vy £*lc}f At" 3 

1513112 O 'J ^7X7, h * 'y-b-^KWtSfS^fc UTM 
IBS I P^uZiyfrZmtv-b-VZ&fmzf"; 
•ft. 

buE)S^^ >y -fe-SrtDipKSSftS p r o x y - a u t 
hentication informatio n'vy 
MfBS I pyn*5/©EiEr-**Sttffl1"^ 

MfE proxy — authentication in 
format i o n'vy ffrbfoZ tB LfcMIBS I P7° 
□*y©ESEr-*KS^TtuiBS I P7*D*i/£12 
Et37r77i£££K{|;t3Ct£®^-f37j 

[11*92 2] W*92 1 fcKMM>£i£T*oT, W 
EH 1 »«fctf S 2 ©'J h * 7 -fe-SW SIP I 
NV I TE'J^xah-cfcacfcfcftai: -TS^Sa 

[11*52 3] ■b7->3>-rx->x— > 3 >7°n 1-3 
;l/ (S I P) tyJJyhtiK S I PT'n+S'fcBB* 

^;U^nxl£ffiE7*nro;Wc^TM!BS I P^7^7 

y h zmt s rcmwM.r-z &m t % *t v -ft 

SoT, MEEfiEr-*^ MIH S I pyn+ffcT* 
•bXt5/ci6©+»— /WT7 h%#trXr7 7'fc, 
MI5S I P7n*Mcl§rr3fci6£, SMIIr-* 
proxy — author i za t i o n ^ y 7* 
^Itt&REG I STER^y-fe-v^MfBS I P7*n 
*->K )MfI? 3 7r 7 7* t 3 C i: t ? %Ji 

So 

[M*9 2 4 ] IMS 2 3 KKKOflS-eft o T, bu 
Ep roxy — authorizatio n'Vy^W, 
lulBS I Ptf-/*fc0|B5fi!H© , .J*xxh*a#, 

miE REG I STER/'yb-^KWt5(SSi:LTffl 
IBS I P7n^yfr6£g*7*-^££ttflx37T7 
ft, 

iSEJSS^ 7-t—>*«D t P(C^-^n^ p r o x y - a u t 
hentication information^ 7 
#6*6, huIES I P^a*->©Bffir-*%ftttflt^ 
rvft, 

fuE proxy — authentication in 
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formatio n"vy 2"fr£ffit!i5LfcfijES I P7" 
a+S/CBSSEr-^CS^^TMES I P/o+y^E 
SE* 5 7, r 7 7 * t *> fcl A 3 c t %4#fR T 5?3 

[11*92 5] ■b7>'3 Wxi/x-v'ayynhn 
fl/ (S I P) y*x*My-b-s?*arr-*«J6tf 
IB tl £ ft Tc a y tf a - * BJ MKft T* o T , 
S I pyn*MC7^*Xt5/c»<D^l/^DX-9— 

10 proxy-authorization^ ?%15tS 
ffi»<DS I P^vy^fc, 

tv*-i/*Wt*ffiZ.Z>L.t*¥fWLtt53y\Z3.- 

[is*92 6] 11*92 5»cE«o3>tra-*prK 

$9t, MEp roxy-authorizat 
i on^W, BuIB^;l/^nX-9--^f-^7 MClS 
t5-t7^3y*-^fflbTMiBS I P'J^iXF^ 
7 -tr- ^©-WCSS 1 3 c fc J; T£f££ ftfcg£ 

20 -r*3V^a->RlWIM*. 

[11*92 7] »*92 5tE«©3yea-^Rjl 
? T, iufBS 1 PU*xxMyfe--5?ffS I 
P I NV I 7EV?X7.hT*&Z£t]£¥fWLtt5=i 

y¥3.-mm%kWo 

hi*92 8] »*92 5iaim<Duy^j.-^m 

«t»T?*^T, IufBS 1 P'J*XT.M7-t— >*tfs I 
P REG I STER'J£xXhT*&5<l££!|f«fc-f 

30 [0 0 0 1] 

^^7 h7-f *^bfeS«BiiWcHU ISICtt. 
Wj'Jr^m ^Jx.^^n7>ISll7 p nh3;Wc 
StJ < -b* a U r ^ t^3^= ~>x- i/ g 
V7°o fn;l/(SIP:SessionInitiat 
ion Protocol) £2NHr 7 ^ 3 y^SISf 

[00 0 2] 

40 [fi£*OSBB] -fe 7 -> 3 WiS/x-S/ 3 > 7°n h n ;l/ 
(S I P) ti< 3yea-Tf>7*gH^ SM^y 

Dh3M$5. S I PtiifLfflttO$>57a 
0 , ^ < <DS%3 ->t u ^-eifi-tr 7 f 3 y*St3J[t 5 
©{cffiffl^tlTtfc S I PttWAtf» ^y^-*7h 
m «fi, 7Hf>X (presence), -T^y 

Mafciov >X5 y h ^ 7-b-^yytc^ffl^ nr 
so v^. s i pois*a*ti» ffiiifcfto*-o7Ki/ 



7 

Z<DTlc^Z>m% (a-lf) fc, 
BJ03Vea-*fc£ftbT^fcfcLTfcfcirD*< c 
fctfTt*, ^-yt^tTUrW (personal 
mobi 1 i t y) fctftf-M/CVSCfc-e&So 
[0 0 0 3] SI PKStJ<-b'y>3>M!6*^l/-'> 
aytDimt?) 1 OCt-Fti r^a+S/ (prox 
y) €-Fj W*tf, S I P*7^7>F 

( rifaiLTtj ) tt, itB£nfc£f# ( rflftbL 

ftj ) ^^-/VrKl/^CftlfcTFUXCioTK 
9Jt« I NV I TE^y-fe-v'fcHOS I P'J^xxh 

-J/'WHRKS*. I P*7-f7yr-©7<7r- 

/V>yF (outbound) SI P7n*->£2i5ia 
£ 0 *^TC©7^h^>HS I P7n*->tfi:©>J 
^iAh^7t-^ LtfLffffiO+HS I P7a^ 
•>*ftLT, *HS ttfcStffll* ^ 7 y hilg^n 
TV^S I pyn+i/tciEjMU ^T'COS I P7a 
I NV I T E/-yt-v ; %^ifflJ^7l'7>b 

oookj ) uy^x-y^/rbTnfttit 

7C^5-Y7yF{cM^ns ilftic^oT, ^Ltl^v 

3Kft4„ fflOS I P*7'f7>b4:!flrrSflMc, S 
I P *5-f7 VFttS 6K, REGISTER U ^XX 
h^Sdt^ioTS I PUz/Xh? (r e g i s t 
r a r) fcif**eg*3&HO@«T?, S I P+r-A 

[00 0 4] 

I Pti, l(§*y->3>©-fe4 i a';T*:&J:tf77-f , /< 

€-f\ *fciicn*i«fcL*c\ LfrL£<o-y-x 

T% SIP^f7>r-tf, S I P^-7^7y FOa— 
¥£EfiE t~ 3 3l> ^xx b%7V h^">>F S 
I pya+S/tcaS«ck*S*U 7$WV>:/FS 1 
pyn+^\ S I P7^7>McttLTg<*£EtI 

t«iii:*B*-r4ci:tfasu^ s^t, sipu 

£xXF;*yfe— $?0££tt*GWf 5 C 1 1 L Uf 
&gT*£5o ^7-Y7>-F • 7o*v/ffi8ii3j:lf><yfe 

0«ffl%S*1-§„ U;*ST, liKtt©»tH:*ay 
r-ffllttfcS I P->yt 'J >WU-^3> 

S I P^7^7>h^7^F/^>F7 p n^-> 

U BrSO-fe+a'J S I P->^t'J>^7b 

eo 2 o©««*-«iKa«WK*fi-r*c fctf-r** 
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X ofctZfrt^? il fc^fi8fi±oaffl-p*5o 
[000 5] 

#5iHH\ y/I^nx (Kerberos) 7n Fn 

I Pv^'t'J y^^b-^s^O^y-fc-S^n-lc 
ffl#i£A,T\ S I PfyJJyhtS I P7a*^tl 

HJCktUf, S I P^5^7>F^5)S I P'J^XXF 

tfSSl/cs i P^7^7yHi, WB-fe* a 'Jr-rflS 
«fcS^Ttf-/*KflLT*7^7>h*BE"r5fc 
feO^SEr— £ proxy author i za 
t i on^y^£tt*HufEU*xXF*y*-v'*©£? 

**aUT>r««*^1^5«#K8, pr oxy a 
uthorizatio n^'v9ii\ ~fu*i/[z7 

r-£S7T— proxy autho 
r i z a t i o n"Ny ¥<Ot— %\iZW3 < ^^fT^F 
oa— »roBEfcJ*?&bfc*£, S I P7n*->t4, S 
I P^5^7> ht^xXMy^-i/*©fJ2£n/c 
§{|#£©P^©S I P^'yt-^>^tUy^Ktffi 
oTC<D'J*x7.F£&£-f3 0 S I P^7-f7>htf 
ffl5Ba*g#LT^Sif#» SIP7n*54i. 
■IJy KCjM^^JO^ -y-t— i/lZ p r o x y auth 
entication information (7o 
30 *$>BH1W© ^«y^jitot5o co^y-fe-S'ttW 
I NV I TEU^xXhtCfS^tTifttlL^S I 
P^7-i , 7>F^3E)Sbfe T2 OOOKJ SI P^g. 
f fcli REG I STER^y-fe-^CjSSUTS I Pb 
^XF7-9--/^figtfc T2 OOOKJ jSS-pfcSo 
proxyauthentication infor 
ma t i on^R f9^7>F* t S I P7n*-> 

[0 0 0 6] *BW©1$fttt»#«KBfflfclBiSSftT 

v^5*v *5mc*iEifloawfc«fetfjpjjStt» 

40 »WHiB*#HLTWT©ff««:B8H*lltrc tic *o 
[0007] 

So la®*, [Bi«o#ffl??^iiiiiiiog^%?i-ro 

^-Vt/Unyt^-^cj^T^T^n^ 7n^*v 
A t ->* a -/!/& HO 3 > M 3. - Z £ft nTlH**©-|R« 

50 C, ^O^X^^Tt, S /ct4^0tt^r-^§J 
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^)iffl«?«gs, *y F7~*PC, 

2, ;^y7b-A3>k:a-£ftk*£#trffi©3>t? 

a-* ->XrAjM£: i: t Kg*?* 5 c £ 

y ? s n/c JiUJiiassfc * o r * x * s n * #• 

ftaytTa— 7V T^vA^a-;!/ 
, n-A^t'J k JBH^ t U CttSBOW 

[0 0 0 8] ttTOKWPttSf, *$WJ**8**fc 
4i)©09^* '>Xf A «f T'^ffl 1" § C k T' f 5 iftffl 3 

fc % Saga.-? F2 K -yXrA^ty 2 2fe«ttf'>X 
f^U2 3^ttJ^*cD^-V-t;bnytra-^2 0 

->7xtAAX2 3H\ yXrA^yfc^trStS^ft 

•>xrAay#-*y h^saaa- 7 f 2 1 

'>XrA/*X2 3«, ££2f£ftAX7-*T?f- 
+ ©3 50ff*©7-*f *f-+*ffifflLfc, ^t'JA 
Xifdi^t'^yFa— 5, Hifl/^i3J:tfn-*;l/ 

ffiittsck^-etSo yxrA^yti, y-F* 
yy-^ty (rom) 2 4teitf7y^A7*-bx>{ 

*'J (RAM) 2 5£#t?„ ROM2 4Ktt, SgftBfft 

&*I!ittsa*;l/-f-y*atyS*AHia$'XTA (B 

1 OS) 2 6tffB1f2ttTV3o ^-vt/^y^a- 

ffl©A-Kr-rx^F7^72 7. UA-^7;H»Str 
^7*2 9©l$y/*&&ffl<D$SlT-i'X* F7-C7 

2 8, 43J:tfCD-ROM$fcttffl<D)l£ji*|c4HOUA 
-/^;^f^X^3 l<DKIR0/Sii*ffl©3tr^X 

[0 0 0 9] A-Ff r ^7>^F7-r7*2 7, ^Mr-rX 
7 F5-T72 8fc«fctfftT.f X* F5^7*3 0(4^n€ 

ft, A-FT^x^F7^7-ry^7x-x3 2, lit 

T-i'X7F7'l'7Vy#7x-X3 3, to&XfftTJZ 
^F5-l'7-<>^7x-X3 4ia^T->Xfi»/U2 
3fcJg8*ftT^3. cneoFv^rtsitfBSiany 

1, Tn^A^eya-rt/, fc<fctf/<-V7vU3yt;a 
-* 2 OOftftO^OffilOr-^^EItl-^^JfattE 

a-Kt-CX*6 0, 'JA-/<7"MKgT-fX*2 9fe 

<tt/y A-xTvwtfV x* 3 1 tftefflSft-cv^tf, 
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*-hy y>\ ^y^Aj^-bx^-ty, y-F*yy 

-**y, XFU-y*x'J7*7 F7-7ft£, 3ytf 

[0 0 10] A-FfVX7 6 0, $MfVX^2 9, 
7trfX^3K ROM24$fcttRAM25fc{J, * 
10 ^U-T^y^>7,rL3 5, 1 Of fdift$<077 > y 
>r-i/3y-7u?yLZ§, fS07'D^7it'>*a-;l/ 
3 Ds&xS-fufvkT-ZZ 8£#tr, ^<oW)^ 
n^vA^a-^Ett-rSilfc^-etS. a— <f 

a, F 4 o , >1W yf^ yfr'U x 4 2 ft if 
oX*SfB*7>LT, 3T>F^J:tf1f^^-7t;l/ 

3yea-*2 0KA*t*«:k^t?t5o uOffiOA 
TJ^B (0^-a-f) tcttflJAtf, v^n*y, y*3^ 
Xf^7 7, tf—L>^'j F, ^17>rt, 7* + y-ft 

20 TV\ ->X-rA/^tc^$n/c->y7^-F-Y>^ 
7x-X4 6^tTfflSa-7 F2 Uc&tttttli 
t)\ /iylsfrX-h. y-A#-F, a-A-^i"J 
7;WU (USB) , *7 F7-^y*7x-X;*J- 
F ft H ©ftWM y * 7 x - X fc i o T JStt1"'* C 1 1 T* 
**. «5C, *-*4 7*fctiffi©^l'7 , Or^X7' 
UfSH^ MtXT??** 8ftHO-T>^7x-X 
^LT->XtAA7.2 3fC^ic^nTi/^o t-^cD 

toe, /^-v-f;l/3yifa-^a-^k:, xtf-*, 7 

y>*ftifofliaai*8B (a^-rr) *atr. 

30 [00 11] /<-Vt;V3VVfa-^2 Otis U*-F 
3ytfa-^4 9ftk(Di^^/ctil!{^(Dy ; e-F3y 

««T»trr5ck*<Tt5o yt-F3yt°a-*4 

9ti, giJ<D/^-yt;l/3yt!a-^, 

*y F7-^PC, tr781$fcttfl!lOtfiiO*7 F7 

-^/-Fkt-Siik^T-tSo HlKtt^tUEItBi 

1 5 0 rftt L*^$tiTv^ft^A\ y *- f ny ^a- 
^4 9»iHRK, ^-vt;l/nytfa-^2 OKHtT 

40 t^Lfcl6a«8ifi» p-*;Vx'J 7^7 F 7-f (L 
AN) 5 lfc*tf7-f Fxy 7*7 F7-^ (WAN) 
5 2^tOo c«J;dft*7F7-*y^S^(i, $a 
Bf, jfcHF*93yfcra-2*7 -<>F5*7F 
43j;UVy^-*7 FT'Lr<fltl5n5tOT^ 

So 

[00 12] LAN*? F7-*y#B8reiS!ffl*3£ 

/^-7t;l/3yifa-?2 0{i, *yF7— 7-fy 
?7x-X$fc«7^7^ 5 3^/l-LTn-*;|/*7 F 
7-^5 ltg^nSo WAN*7F7-*yyS« 
50 ?ffifflT*fcSx '<-Vt*3yKa->2 Oti-figfC 
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*rA5 4, £ fc(iWAN5 2£ftLfcaffi*«£*3 

*7 h7-*{fc£ftfc«8K?«\ /<-V*;]/3>U:i- 
# 2 0 K M t t fc 7n -;k £ tz\t 

[0 0 l 3] »Kia*t4v«»)WTORWCI4, lfe 
(act) **tf*^U—>3>©E^WSa%#!HL/ 
fctt*"? b-S/ a y pf if c O ± 5 £7 £ h 43 J;tf 

-zzmntz* nmcxox, ay^i—SHot^u 20 

[0 0 14] 3McH2*#Ftr*. Wa'J 

»K*;l/*n;«7 , ah3;l/*^Lfc-fe 30 

3;KS I P) fcS^K y?XXM7-fe-v'*fd§#& 
A/Z 5 , S I P^5^7>h7 2£S 1 P7n*»>-9— A 
7 4tfffl5£fgBET£CfctfT*£5J:-5l;:.U *»OS/^ 

£fc?5a S I P(i, RFC (Request for 
Comments) 2 5 4 3 K^SfrCVa. CIO 

[0 0 15] W*tf, -ftWa-b-yfayBlte^U- 40 
is3yx°im2lC7jkt£i>lc, gijox— «f8 0 (tfiRtf 
r#7 (Bo b) J ) fcBL*Lfc^S I P^7-(7> 
h 7 2 ( rif dibTCj ) ©x— 77 6 («*tf T7> 
(Ann)j)tt. #7W INVITED 7 >'8 2 

0j&H;£nfc§t£T*&acfc£Silg-r5 invite 

t ?t-i?43S*. CIO I N V 1 T E ^ 7-tr-^fi, Pf 
ttibTtS I P^7^7yh©K^-r>tW)£t577r- 
/*7>K7 4 n*S/tf-/W 4tciMe>tlS 0 02tc^-ri 
5fc I NV I TE^7-tr-^i^ Z.^yf^)yft< 
b—>3>tcffl^TSfi!S©S I P7'n*S'*ftLT2& 50 
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e>tU ^£>&> f^<0ziy^3.-^8 80S I P75-< 
7Vh8 6 OftBLft) fCfiJil-r^o »*U^yftB« 
?tt, 5/^'JyySK±OS I pyn+i/HTeiM* 
OS I P y >^ 7 -t- S?0-b*a y r ft\ I 
PsecT'nh^M'FT*, ffdiSSL (Secur 
edSockets Layer) 7°o h 3/l/<D~F'tV* 
-Y 7**1 LT ^ 7 -fe ^*i3S5 C t £ J: o T<£S£ft 
*, £©0TCtt S I P 'J *XX btfl N V I T E 'J 7X 
X hfctf, WTTBWr*BE36ra»i» R E G I S T E 
R, MESSAGE, SUBSCRIBE, SERVI 
CEftH0ffi0*^7V)S I Py^xXr-CttLTfcffi 

[0 0 16] S^tU yy^lz-S'a Ur 
* fcjtf S^tU 7-t— ^O^ttfcBfi* *fc 
46. 77h^7VKS I p-fvf-i/V-M 4«, 
*'J>7«B9 0£:frLT I NV I T E;*yfe— 3?8 2 
£i£&-f3itu{C, BfititjcS I P^7-T7>r-7 2©x 
-77 6©HH£#J&SCttfT*# 5o *KH3*#jH 
"t*. *»fflKJ:nff7 , a*^ , 9— ^7 4« I NV I T 
E^7-b-^ClSgLT, S I P ^v47y\- 7 2 lef- 

9 614, S 1 f««HCd'7>f7>b7 2*^©3-7^7 

tS, S I Ptt$K£8SttfcXT-*X3-F T4 0 
7 Proxy Authentication Re 
quired (4 0 7 7n*S/^SEA^S) J £^tfo 

s i pft*Kj:ntf, fti/>->7 7^->*9 6 am 

r4 0 7 ^7-t-> ; J «s paEoft»ic^7-f 

jyh im% bmnif & s 4^** a y r >r «**J8 

^"f 5r— ^^^tr rp r o x y — Authentic 
a t e J .^7^7^-/1^9 8%ttSo Proxy- A 
u t h e n t i c a t e-^7^"©1f5:fci;Lf : rtS'N7^ 

(4, ^;I^nx^SfSU^*ayr-r«HH/£*^ S I 
P7lx-A7-^Ttt, NTLM7nhn;WcS-3<-t 

[00 1 7] Z<bl,m3%PWt% 0 INVITE/7 
■t-"J8 2K(SStfc7'o4 : ->-9— 4*>5)4 0 7* 
7-b-'>'9 6 4§M5t Proxy-Authen 

t i c a t e^7^9 8^6S I ?^v47y\l 2 
ti, -y;l/^nxHS^fflt/cx-7©EK^7 , n+~> 

BSfltTl^V^i*, ^5^7yh7 2l**^-p, SI 
p7d*->7- ^ 7 4«^Kpx • *- • r X r- y 
Ua-^y OE*) (KDC : Key D 

istribution Center) 1 0 Ofrb V 

-;W7 h i o szmtZo -nmmx'it, kd 

C100*\ ypm-^7 4«h7^>nyha- 
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7 1 0 2©-ffiT*«, -fr-vWr? h 1 0 8££Dtf#L 
>J747y\-l 2\Vfi\V>\ NV I TE*-yfe-5> 
1 1 0%SS5o fc^UC©tffC«» INVITED 7 
■fe--5> 1 1 Otf, SI Pf±«(cS^< P r o x y-A u 
thorization Cfu^-i/ff^) — 
;1/ K 1 12 ££A/l?^5o Proxy-Author i 
za t i onA7^*7-/-;l/Kl 1 2ti» ^n*^- 
^K7f /Wry h 1 0 8££tf. 

Mf^Hostt, {^ffl-r§-t7^3>*-i i 

6 %^A,T*l^ 0 Proxy-Authorizati 10 

IMKIBHt*. €ESa^T\ Proxy-Autho 
r i z a t i o n'vy ^7^7>r- 7 2tC 

So 

[0 0 18] SI P7 P n+->+r-^7 4 8, ^MnX 

tf-zwr? h^ai&iisnfcsaii nv i TE^vb 

f KOtSlltt*. KDC 1 0 Ob%GlZ^ZZ<D 20 

f-frvhj!ra«n?fc**£, a— f7 6ttBRSft, S 
I P7°n+^-^7 4(±. ->^t'J>^8B±0*© 
7°d*->1 2 0(c I NV I TE*yfe-i>l 1 0£&iM 
t5„ tvJJyYl 2i}\ I NV I TE^vb-^l 
10©Proxy — Author i za t i o n'N'y? 

1 1 2<D*-?mmmwMizzkiM£. -fa*~yy 

©8*©/<fry h(cl^f5c C©^7t-^i, *7 30 

Z>-fu*i/l A<r>Wm (credential)4t 
frProxy— Authentication Inf 
ormatio n'vy^l 2 4%1$tS 0 
[0 0 1 93 S»WfCx I NV I TE^y-tr-S/'l 1 0 
ttUffflbfo *fcfc$jfl703:/lfa-*8 8©S I P 
^7'f7>h86KS<o COi«ttBI*$»tAtl*« 
^ fajt5fe(4 T2 0 0 OKJ *7-b~7l 2 6£ig 

iSn*i:, «flHb7E«4, coi/yt UyygpgtBI^ 40 
t/cS I P7'n^->^l1-ct*<, nftBLfttlSK 

[0 0 2 0] $ICH 4 *n«f, s 
I P^v^7yh7 2 t S I P7'D*->t-A7 4<DI 
TBIE-b+aUr^7Vv/x->/3> (S A : secu 
rity association) ^Slfi'f S^fr^l' 

««iffifflt*£i:tf-i?£, co«!8««H«\ C©ffi 50 
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[0021] 0 «wno«t»K, taticnxt 
Kft -b+aUr^ s A^ttasnri^ tsecu 

R 1 T Y_S T A T E_N0N EJ 1 3 2T'&£ 0 
ty-fjyhl 2tm?rc I NV I TE*yfe-5?fcJS 
SLfc7'n*->7 4*^e»4 0 7f-+U>^-yfe— 
Sttttt)* Sfett7 , n*i/i7 , UBBE (pre-au t 
hentication) £Mr1"3 ^ ^7 
7^7>h7 2 ti TS ECUR I T Y_S TAT E_A 
CQU I R I NG_S A J tfSl 3 RflE(<:& 

g#-b * a y f -f 7 v ->x-s/ a >r- * ^iff-r * o 

[0 0 2 2] •b*ayri'7y->x-e/3 VttHRfc, 
fyy^jyh t S I Pyn*5/*qffi««Mlf*Sf^4» 

7 hfcJlHryS'a >*-£#tf 0 ^Mu^Cf^ 
Wi;£ftfcS.Att^±-e&S. -ffcfcS, ^ft^fffflb 
T, S I Pt^JTyV®^— tffcTn+i/tf+ftKB 
tit SCfctfT'f 3, ^t^VMW^T, £©SA 

8) o -fU*i/ti\ #&£ft/c2 OOOKp^y-b-v^ 
5BLfc«# (gpgl 4 0) , BBttiSarcS*), b*a 
Ur-f 7Vv-x— >3>tiS|u5nTt^ 0 t%t>*>5 
7^7 V h«S A_E s t a b 1 i s h e dtflil 4 2 
tc$>3 0 LfrU 7 p u*i>^ti';fC4 0 7-^b>^ 
*7-fe-$>«IUfc«£ (SlKl 4 6) , >Jv47y\ 
\i, -fu*i/ti^&fs.tmiM, ZVtcibtyJJy 

4t, ^T'^7l'7>htt rA«y^-+7J I9H (^J^- 

«5») ofei^iii (®m 4 8) , zmms 
i p^7-b— >**as«. 

[0 0 2 3] S A E s t a b 1 i s h e dttSU 4 2 

t a r> rmt » -b * a y r ^ 7 v ^x- 3 y*^Hi»a 

nfcfc 64MB 9, ^7-T 7> h HStfgSE*^tTt 5 
c 7n^McgiJ©/i 7 b-^jMSil t^Tt 
So LfrL7*a*5/a<4 0 7fthy->77t--v*e 

^rci^ (ski 50) . ^7^7>hti, mmntc 

•b+a y t-y 77 ->x— > 3 y4^n+->tf»oi4 
Tft»)T»ffci:**-r. ^©ISS, 'Pv^JyYM, S 
A_Dr opped«ffil 56KA9» S ECUR IT 
Y_S TAT E_A CQU I R I NG_S A«.^l 3 6 
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[0024] mm^rctss*), ^.-wwcklt 
mmm- n t l M»»*sft* * c t * 5 tt5. n t 

^ NTLMti, S A £tt£SH§L (IS 

Kl 5 8) , J|^4SA*SlO^'yb-S?CXnT 
■/ul-y'izmZt^OM^if'hZo ftftftEfct NTL 
MOSS, SABB«WI*«r*5'f7yhJ!»»60JBl 

(® * {f £ y ■< 7 y Y h 1" § 7* n h 3 /KD^~ 

5o CttE£gLT7 P n*->+r-Ati, ^ONTLMM 
!WB*J:ifHRK: r n o n c ej fcif sfns^y^A 
ft/W hW*dtri(W)BaSEr-**^^a204 0 
7? L -vb;>'v f £&5 (SKl 6 0) o cnicfSSLT* 
7 ^ 7 > r- ii , flaofcftfc «fc tf 7n * S/fc * o T 
g&ftfc T n o n c e J fflOA'yS/afC^OlEW**^ 

ffltTist^o cnti> NTLM-oyj^yf— > 
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-ynmiZiiVT-bvi/sy^-ZWZo S I P~fu 

* y y?w&±<D9i®$. 7 ytc s i p u * xx h *<E2t 

U SHIMS I P^7l'7>h'NO*<D^'Vlr-: V (01) 
Alfgfi#ft^©2 0 0OK*y-fe--5?) E»&** 

(.mi 40) o 

[0025] si p-^^yh-fcs I P^D^OH 
OBSE g 7 -b - : tffcft K H4* 5 2 $ 2T £ 4 S I 
10 P^y^OtXKOV^TttaKKWr*. 

[0 0 2 6] (4 0 7f5g) jtfcJE^fcfcfcD, INV 
I TE*7-lz-^£&ofcS I P»^^7>h (Sfett 
«f) ©iffiiJfcg#Lfcv^£, S I P7n*i/ 
■9"—/^ 7 4(ix Proxy — Authenticate 
'n 7 $f£Str 4 0 7 ^ 7 -fe -; 9 y 4 7 > Hcl & . 

tt3&$U^lffiff#i©P r o x y-A u t h e n t 
i c a t e'N>y^O*AttWT©fcfe0T»5o 
[00 2 7] 



Proxy-Authenticate 
ata 



"Proxy-Authenticate" scheme kerb-challenge gssapi-d 



Scheie = "kerberos" I 

kerb-challenge = 1# (realm 
ssapi- 
data) 

targetname 
URI 

opaque 
qop-options 
qop-value 
gssapi-data 

[0 0 2 8] CClCSJtEl/fcP roxy-Authen 
ticate^Wlitt, THTTP Authe 
ntication'. Basic and Diges 
tAccess Authent icatonj t^o 
£M<D IETF RFC2617 fttVi. TW 

WW- Authenticate Response 
H e a d e r J tmT*$>%o COifcWi^OaH**** 

T a 1 g o r i t hmj 43 J; If r s t a 1 e J fit 
frntV5 0 'vy^'O TschemeJ 7-1-/1/ Fti> 

77-i7>h^HRt^i:t%5ige{ct?>o >?y47y 

■9-#-hUTV^>«^EttNTLMBB«lll«KRt 

[0 0 2 9] realra/^^li, S I P7"n+-> 
AIL, tysfTyhtfTtizTyLko tLT^ZS I 



"NTLM" I "Negotiate" 
targetname I [opaque] 



qop-options I gg 



= "targetname" "=" <"> URI (1*SP URI) <"> 
: absoluteURI I abs_path 
= "opaque" "=" quoted-string 
= "qop" "=" <"> l#qop-value <"> 
= "auth" | "auth-int" I token 
= "gssapi-data" "=" (token I quoted-string) 



& K a— if fflmt 3 iJBtf * * Ebt/^IIB^^-b -y h * 
a— 9**HIBiJt*©*l!ltt*fc4&, real m?ij(ia- 
■iftC^^^^o rtargetnamej ^7^-^ 

ttnr£<ess4^7^-*t?*o, s i p/u^-xofq 

<Dfo®lts tryyjyhtfS A^fititTV^yn*^ 

u*'>^W£tS<0*l!l»t'5o To p a q u ej rt?* 
Sta$tlT^5ltSOSAK5g§l* 

FtfSAfcabT£jST5#*<0Proxy-Au th 
o r i z a t i o n ^***fcE*Sftftttfttf4&4 

[0 0 3 0] CCSWWBIlTtt, I ET'F RFC 2 0 
7 8 (*©^W#»HCJ:oT«WII»fcfi*i&*ft 
*) K£«£ft*:GSS-AP I (Gene r i c S 
50 ecurity Service Applicati 
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on Progra mm inglnterface)^ 
^gSftTfc!), l©LT^57yy ^-5/3^0^ 

ss-ap ittftK, fiiTyy-y— >3>*^ soot 

y >J y-s/ a yteBWfttt&ftfca-tfSBfit* c t 
^oltt^l" 3 0 Proxy — Authenticate 
'vy^fcitft&St * Proxy-Author iza 
t i o n^vy£*<7)g ssapi-dat a7-f-;VF 
H\ N T L Mfci:(fy;Hn^'tr*a "J T4i^j>T-V 
^UgL/c-t + a'Jff AP IiaoT, SA^dTS/X 

—> 3 vgpgo^tcs $ n/c r- ^ 5 fc 46<d 

©T*&3 0 Cft^cDAPItf, ^7^7>h^P.yD* 
v"V 43 £ If 7°n * 6 £ 7^ 7 > r- 'N&S & 
5 g s s a p i r— ££iI"3"o g s s a p i r— £f±, 
S I P^7^7>F/7'D+Wy7 l J^yf->'3> 

tffiE? T$ L ^ £ -9"- /W» L TV ^ -t * a 'J r w O U 
^mtyJjyYfcWiz.** qop/<5*-*«i* 

a— tfOEH^SCtJ&Ji^tS T a u t hj C-fey 
h^ftTVSo 

[0031] Proxy— Authenticate^ 
[0 0 3 2] 

Proxy-Authenticate: Negotiate 
realm = "Microsoft RTC Service provider", 
opaque = "ABCDEF456789" 

Proxy-Authorization 
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* qop = "auth" , 
gssapi-data = " ABCD345678yu i kj h 1 bcdf saqwety" 

[0033] itmsnht^jTyvmmttz 

ft, ZyJjyhfrZmtZS I PWyhlMZIt 
££ftH§£Ktt-iRfc, S I P7n*i4i% s 1 Pt 

©fcft) S I P7a*->tfC<DS IP UR Itcltti 
t + a 'J f Y 7V ->X-> 3 y^oftl^t^ SI 
P7n±i/te>;747yh(Dmmg$tZ>T:'&5To 
10 *7-f7>h*MIfflLT^Sffnr/<7*-*4:S I P7 
n * -> tfjflft L T ^ S fe OCHC 5 XV -j; 5 If 

S I P7n+->«« *7^7yh^TaU^ 
S I pyn+^mT^E^&IW^-**! 

[0 0 3 4] (4 0 7f-fl/>ifK.iiti^y^7yh 
<Dfcm 4 0 Tf-Vl/^tCJS^bTS I Pty-fjy 
Mi, 4 0 7^P>->Vy-fe-v t £/rLTS 1 P7°n 

20 .fc^t-r^c S I P^^7>MiC s e qfifclitf 

u ^+ uy-ycotiMt^orzmws i P'j^xxh 

Proxy — Authorization U ^XT. 

h ^ 7 ^*co* (c xft sftfcupsit « 1 1 icsast *. 

JffSU^&flBBUlCfcW'SP roxy-Au t ho r i 
z a t ion') ^XT. h^y ^OlISttWTOfcfcOT 

[00 3 5] 



Proxy-Authorization" ":" scheme kerbresponse real 



message-qop targetname 

kerb-response = 1# ( [crand) I [response] I [opaque] I [gssapi-data 

] ) 

message-qop = "qop" "=" qop-value 

crand = "crand" "=" crand-value 

crand-value = crand-value 

response = "response" "=" request-digest 

request-digest = <"> 32LHEX <"> 

LHEX = "0" | "1" | "2" | "3" | 

"4" | "5" | "6" | "7" | 

"8" | "9" | "a" | "b" | 

"c" I "d" I "e" | "f" | 



[0 03 6] CCfCfElLfcP r o x y-Au t h o r 
i z a t i o n'vy ?<Dffi$lit, IETF RFC 2 
6 1 7{Cgg£ftTV£> ("Authorization 
Request HeaderJ £[BM£?&5o fcfc 
U &MMR<Drty*—$i r a 1 go r i t hmj fc<fc 
tf TUR 1 J tit^ftTl^o P r o x y-Au t ho 
r i za t i on^fli, U^xXhUR ItJitfV 



[0 0 3 7] 

-F r om'N'^UR I 
-To'N-y^UR I 
— F r ora^yW?' 

Proxy — Authorizatio n^'y^© 



a^7^©^i:jiin$ft5o tr>3^- 50 fcrandj SftttProxy-Aut 



19 



10 



(11) ffiHZ 0 0 3- 1 0 8 5 2 7 

20 

* targetname = "serverl .domainA. microsoft. com" 
[0 0 4 0] ~fu*i/frt><T> 4 0 7f-+U>^Cf5^t 

ztzmic, >j747yv\t. mzmxs i p7 

7-<f7:'hffitt*7n**>-9— ><fcfi»U -tr-yi/3 
yofc*ct*a'Jf-<7 v s/x- > 3 ymmvct Z> 
■/□-fcXfC&^tf, P r o x y-A u t h o r i z a 
t i o n'Vy^'tex fgssapi-dataj 

[0 0 4 1] (fgSEBE) *«ao->ty*Tti. S 1 

ffifflnf***^ •f5^7yHi, GSS A P I <D« 

Jt^CttSSK:, S I P^5-<7^hcai5 

roxy — Authent icat ion— Infor 
mat i on'J £x7. h'vy ^tcAtiTStfnSo P r 
oxy-Authent i cate— Informat 
i o n©«i«WT©i:fc*)T«5, 
[00 4 2] 



20 



hentication-Inf 0^7^*0 T s r a 
n dj ^5^-* 

-S I P^y-tr-v'E xpi re s'vy ^OE x p i 
res® 

Tt' , &l/\> proxy — author izatio 
•y?l£s g a s a p i — d a t zrfyt— r e 
s p o n s e (S«) /*7*-*£Stf. 

[0 0 3 8]WTK» 4 0 7f-+UyS?fC»1-**74 
7V hOfcJgtiSttSP roxy-Authoriza 

t i o n^7^<DWI*^"fo 

[003 9] 

Proxy-Authorization'- Negotiate 
realm = "Microsoft RTC Service Provider", 
response = "ABCD87654cvx, 
opaque = "ABCD1234", 
crand = "1234" 
qop = "auth" 

targetname = "serverl.domainA.mjcrosoft.com" 

Proxy-Authorization: Negotiate 
realm = "Microsoft RTC Service Provider", 
opaque= "ABCD1234", 
gssapi-data = "ABCDEF 123456", 
qop = "auth", * 

ProxyAuthenticationlnfo = "Proxy-Authentication-Info" ":" auth-info 

auth-info = 1# (message-qop I response-auth I srand) 
response-auth = "rspauth" "=" response-digest 

response-digest = <"> *LHEX <"> 

srand = "srand" "=" srand-value 

srand-value = quoted-string 
[0043] Proxy — Authent icat io 
n— I n f o^y?tp<D T r s p a u t hj * 
tits COJS»t*W* (BK*#*Tli**:/n*5'0) 
m%*m&o f s r andj 'iy*-*lt. S ABIig 

<D(cffiffl$n§= 40 

[0 0 4 4] WTC, Proxy-Authent i c 
ation-Informatio n ^ y 5><D— WJ^tf 

r. 

[00 4 5] 

Proxy-Authent i ca t i on- 1 nf o : Negot i a te 
realm = "Microsoft RTC Service Provider", 
qop = "auth", 
rspauth = "ABCD87564cvx" , 
srand = "9876543210", 

targetuame = "serverl.domainA.microsoft.com" 50 



[0 0 4 6] S I P7U-A7-2?ttHKK. REG 
I STER'J^X^h^ffltrclg7D-b^P^C, 
S I PtyJJyhtiK S I P^n+j/hOt+i'Jf 

oTS I P^i^yMix S I P7'o*i'fr£*y-b 

7yh**i#*s i pya+^cig-rsfctttt, s 

I P^-lTVMilSIB^ ^MPXf^7 F^HO 
EBEr-^^REG I STER^-vfe-: VfcMlXxkZ 
CUz&oX, iftoa— «f*S I P:/n*5/-9--/<lc 
»LTBKt5i:i:*«Tt5. SlP*5^7>htfS 
I P7n*i/ttT*tlg?nTfc<3, frOS 1 P7d 
*5'KttLTMKftlT^*%fr, I N V I T E&t'O 
S I PV?JL*b%ty'(7yhtfmZkZ fctt, ^7 
^7>h*^0'J^x7.h^7-fe-^\ SA6ti7o 

[0 0 4 7] fcttfA, g{**tf- /<KS&L&<T 
fe, S I P^7^7yh«'^XXh^7-t-^S I 



(12) 
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P7n+->lca&*«:J:tf-C£*. >¥Ji5L7Etf7n*->fc 

7>htf7u*Mci§i£tt-LV3Ji£?2D?Ti) . 

S I pyn*5/tt*o»J^x^h*3fco*yyic|ia{b 
ftV\ *0ftfo9K7n*3'tt, S I P75^7:/Mc 
7 -v bV^iMSo 

[0 0 4 8] COftU^li, ^7-f7>h^C<DS 

3£gtf£5<:fc£ii*t£e tyJJyhtt. -b+a 
U tV 7 V fx- S/ a >r - 7 U * XX h *|f 10 

i^ctiaots A£«Lfct5cfc#?t, 

ti. ggtttT'KSftTVStf, SAtfSJSSbfcSftT 
C CD+r-; WDg{*<Dlg£ 'J 7 U7 

t» & 3 c t ft 3 v> ? s. 
[0049J S I P77^ 7> htfS I P7*n 

*s/C«t*MI«teiS"r*fctfK:. s i p^7^7> 
KfcS I pyn + ->Ofl©-t*a , Jf-f7y>'X->3 20 
y (SA) te&bft, •rUHr*a»Jr</7V5'X-5' 
3>%?Stfa#Ll£*ttfttf*£>*V\» S I 

P^7^7>h©lH^at^t, 7d+->-9— i\ 
it, ttj£t5**ayr-f nVT+XhfcSAOUXh 

fr5Hiji»-r«o as%'J7Uyf a-rsfctfK, s i p 

* 7-1* 7 > h 12, EiE-b+a U 7 ^ 7 V a > fe 
[0 0 5 0] 7;!^n77a ha;Wcg-3< ■b+ji Vr 

^«d*«wr*»*u^sia»BttTtt, annus i p 

77-i"7> KDa— tfOEIE^S 1 P7a+f/U-7X 30 

S I P7n*5/fcB8t*fctft«:* >rArtaz*—T4 
7^'JtTa— >a>"ty7- (KDC) ^5><D7^n 

St. s i p^v-r7>h«c:o7^7 h*«¥i«-rs. 

f$!2ftfc777 Mi, -feyS/a:/*-feJ:tfC©fr/V 
^n7-t7^3>«Dffi£0^<O^tD^14^#tfo C<D7 
77 Mi£5£. V-jm&m^mtZtik-k-yy 
3 y*-43imtfi©-t7f 3 ypjl^7^-2£#ty 0 

.iKQStfHi, gssapi-dat a 7 ^ —A> K<*\ p 40 
Ou t pu trtvt-ZlCktlX&Ztl. re-INV 
1 T E 'J 7X7 MC AnT7 t o*i/£&P,tt3o 
[0 0 5 1 ] S I P7b-A7-7rtT'<D-t?*a'j7V 

*H2*#SSLTlfiWr5o «l©«T*tt» S I P7°n* 
4 tf, F^-fy Td oma i n A. Mi cr 
osoft. com: S_s e r ve r 1J OKDC 1 
7 0 fc©8*f8W*t?fc£l«LTlr**i:fiSt*. 
C©0ljT*tt rserverljtf, SI P7d*$//U 50 



4#ea 2 0 0 3 - 1 0 8 5 2 7 
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S/Zh703-K€4:LTteffl2ft5o KDC 170 
Uv 7D*i/+J--/^7 4A^s e r v e r_I D= s e r 
verl. domainB. microsoft, co 
mTN&SfcfcloTVa. 7'D*i/-9— M7 4fiS5K\ 
EW*^>K^*at»LT, ^7'f7Vhfr6*«BaE 
y 7x7 HctSg-f £Si;i3o ^-^Kffl»«, 
tf-ztBHSfcttlBSBIE*"**- h l/rvs-fe+a 'J 
f^Dh3;Hcfc^TS I P^7-C7>h7 4 £WL 
T7°n*f9--A7 4*BfiEtS0£figffi£ft*. 7a 
+H-/W4«, CW-/<*SIlt50fctefflSft 
3-9— £77 * 7 > h K. «t o T£f££ft3 *<D§PBfi £ 

SSPI (Security Support Pro 
vider Interface) ©M&A c q u i r 
eCredentialsHandle £if tftiBtC t 

[00 5 2] 02O«|-ett, SlPtvJTyhl 2<D 
a-f7 6tf7>m 7y(i, NTHy-f>£7* 

i»07*7>hfcn7'^y-r3o 
[005 3] 

UserlD / principal name = annemicrosoft.com 
Preferred_email = ann@microsoft.com 
User_domain = domainA.Microsoft.com 
Workstation = annl.domainA.Microsoft.com 

[00 5 4] tf7fc!iSLfcv^t, 7yii, mm 
-^Xf->3>7 8±<DS I PtyJjyh 7 2£i££ 
■it* (S I P77^7y r-^-b*7tLTifjWt 
gilt* ZttfT-Z&o tcti L=l— tfO-fe * a 'J r -f ^ 
yT**hT?j£5fcttfttf454^) o S I P?7^7 
>h7 2«\ DNS^fflbT77r-^7>K7n+>' 
+r- ;W 4*HOtt* 0 ' C<D#Jl?ffifflt377 r-^7> 
K7d^v'-9— /W 4«, Server 1. domai 
nB. Microsoft, c o m t LTWft\Z*\Z> a - 
7yit, £5j^b ob@microsoft. com!: 
m&LttVCtltWpti. 7y(0S I P^7^7>r- 
7 2 ti^VT, Server 1. domainB. Mi 
crosoft. c omfc I NV I T E^y-fe— >*8 2 
%2S5. INVITED 7 -b- S?ttttTO« S%#Oo 

[00 5 5] 

INVITE bobemicrosoft.com 
From: annemicrosoft.com 
To: bobemicrosoft.com 
[0 0 5 6] cm<DmWZffiMfr-DWWXU-DKib, 
C <D I N V I T E ^ 7 Tdti/ 9+ 'J > ^fflST 

ttoltTfi%l\ S I PT'n+ftf-m 4fi, M i c 
rosoft. co mOa-tffc^HKttbTaafftfc 

f(cwt*3>T©i nv i t e y 7x7 h^^u^ns 
ci:* < &gi:t*«fc5K«ia;£*iT^5. *©isa, s 



(13) 
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I P7o*->-9--/W 4fil NV I TE'JfxaMcjg 

Set d S I P?-7-f7y r-7 4fC*46S 4 0 7 ^7*-* 
Proxy-Authenticate: Kerberos realm 



*->*9 6£&S 

fro 

[00 5 7] 

= doiainB.microsoft.com 



4^61 2 0 0 3— 1 0 8 5 2 7 
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4 0 7 >t«yte-: 'AmT<Or-^^ 



targetname = "serverl.domainA.Microsoft.com" opaque = "someopaquedata" 



[0 05 8] opaqu efi& C©* KttLTttfflt 

4 tidOt f , PSA cceptSecurityCo 
n t e x t fciftfiiiU pOu t pu t^b a s e 64 10 
T3-KftbfclSS*opaquefcAftTiI*. ^7 
^/yhfe^l/^-^fi. :<Oopaq uelfflL 
T> EII^H^ S/cliA u thorization'J 
*X7. r-'Vy jf*ffiffl UfeWI tt-'^OKB® U * X 
X F©S^©fcfc^©*r-/<fcftLT^t *-fc* 

[0 0 5 9] 7>W-^Xf->3yiOS I 
^ 7 y F 7 2 tt, BflKWBT* 3 C t fcffi** 5 4 0 
7^ 7 -t-i/9 6%g^?>i: < Serverl. do 
mainB. Microsoft, c omtSflt" Sfc 20 
4&©£&4*yS'3>*-*8oTV>5fr£$ft'*?'x 

rtOKDCfcSIULT, 7^M^>FS I P7n*5/ 
£7£-bXt~S©7c46©-fey->3 y*-£$f#-rs<&g 
jb^S. C©WTfi. 4 0 7^7^-v ; ©4Hc:^££ft 
fcr ea lmfr6*7-r7>H4, IftOF^Vtli 
g&S F^Vfc^+v'tffcSCfcfcfclSo 
[0 0 6 0] ?n 7 4 ^©^ftffitt^Ha 

^cateHatr* h/^y FBEW»A>K;l/*JBfr 30 
So cnti, M8SSP ifc^tfHJ-fcfcK.ko-CUfi 1 

$ns 0 sspitt, *y h7-^fb$nfc7/'J^- 

-ffutW? (S SP) K3-/1/LT. ffiSE8f#©J£ 

»t*^a%««t*. EH* 7 r-7 7 7°.cM^rS2 
OOtyJTyhQiS S P 1 l&tf&So A c q u i r 
eCredentialsHandle HSti, WlWlC 
&®Lfcu?*yMm*^<0&WL*W&tio MSI n 
itializeSecurityContexttix 40 
ftSJOBBE'J^x^h-b+ayr-r r--£>££fi!c-f 
5o Initial izeSecur i tyConte 

a q u e<I#p I n pu t KAtlTiSS ftSo ^5^7 
y Mi, d©H&©t f C o n t e x t R e q^7^- 
?£U^X3.hMUTUAL_AUTHtC-tl7 htSo 
pfContextAtt r f^y^iis mu t u a I 
-auth* 1 ry*x*Fj SnftCt«irMn^ 

C©tf$gti> ^^JyhoyMnX^j-^l 8 50 



OKJoT^fctBSn* K E R B_A S_R E Q©-g($ 

-A (CdT'liS I P7*n*>0 ICfte-^Ss e c Bu 
ffer (pOutput) KAftTitetlSo Cftli 
KERB'J^XXF ©-»£©-??, S I P$*S (-^7** 

[006 1] H2C^tfc0!"et4, AP 1 MS I n i t 
ializeSecurityContext £nf tifcti 

£07^7:^7 2tf. DomainB (F^yB) 

oyfu^i/t-iW 4'\©+r-/Wry h*7yJ7y 
F 7 2£4?-*.Scfc?> domainA. Microso 
ft. c om F^VOKDC 1 7 O£#46* 0 dom 
ainA. Microsoft. comCKDCl 70 

teyy^jyVl 2\Z, corp. Microsof 
t. c oraOKDC 1 7 2 ^©{f^f-^ 7 r-%£So C 

©PI£^7 hti^ C©20©KDC£cfcoT&WSft 

fc K^'f via*-©'pcBi#{b*nT^5. c©sa^f- 

-7"7 h^ffifflLT, 7^7>Mi, Doma i nBC 
d55t-^'N0 1 t-'^^7 h%yyJ7yhfc4X.% 
<fc :k corp. Microsoft, c om©K D C 
1 7 2lCMi6%o 

[0 0 6 2] CftKJ&SLTKDC 1 7 2&, Doma 
i n BOKDC 1 7 6 ^©iS^f-^ 7 Y*7y-<7yY 
(C3MS 0 c©f-^7 Mi, KDC 1 7 2#Doma i n 
B©KDC 1 7 6fc#*t* F^^H^-Ottlf 
ffcSftT^*. ^7-Y7yMi^^T\ DomainB 
\z&%-7'u*yy-^l 4 ^©9^7 Y*7y<<7yY 
K-^-xSJ;?, Doma i nB©KDC 1 7 6 £#46 
So KDC17 6ti, yn+i>"9— /47 4fc7*-feXt 
*fc ibO-^-^y-y F 1 0 8**7"f7VM«:itl*o 
KDC1 7 6ti, 7>©ny*y-t7->H>*-*fflt^ 
TCOt-r>3 1 -303i;-*l|§ltL, -t7 

-> a >^-©giJ©n t°-£7 >©fFnJf - ZtkMc-V 
-/WyMc8iM&*, 7n*->tf- ^©gflH*-£ 
ffl^T+r-/^^7 h^Bg^b-TSo KDC 1 7 6tt* 
Cft£©tiEE»£* Kerberos Tick 
et-Granting Service Reply 

(KRB_TGS_REP) iCkftTyyJjyb 7 2 

[0063] C©J;3lCv Ini t ial izeSec 
u r i t y Con t e x t £f tfttSTC fcJCkoT. 2 
5'l'7>'h'7'>y©'y^aX ; ev 7 a-;H 8 Otf KD 
Ct©TG S£££P^?5, C©^{C<fcoTjg^tl 
S(f«, yn+->ICJMS^7-t— >*(cl^tS/c46©-b 
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[0 0 6 4] *<DSL 



S I P^yJTyhl 2ti> S I 
P7 , n*2/fcaS*frUM NV I TE^y-b-vM 10 
(Tre— INVITEJ ^7-t-^Wlfn5) % 
ftfiKtS, COlrUM NV I TE^7t->*l 1 0 
& ^7-Y7yh^KDC 1 7 6*»5**Jftoft*-/< 
f-fryh*StrGSS-APIr-***©«t»KaA, * 
INVITE bobsmicrosoft.com 
From: ann@microsoft com 
To; bobemicrosoft.com 

Proxy-authorization: gss-scheme opaque gssapi -rdata 
Opaque = someopaquedata 
Gssapi-rdata = base64 {pOutput} = session key to the proxy 



(14) 2003-108527 
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* fL flcfClfJBJiL/c proxy — author i za t i 

0 n'WPZttSo -tvisa y*-tt. Initial 
izeSecurityContext if til LtC £. r> X 
ISttfcpOu t pu trtv77<Ddp[CktlT£c<nrc 
ffiT&So ITctfoXs SrUM NV I TE^y-fe-5? 

1 l OfifitT0r-*£#ty. 
[00 6 5] 



[0 0 6 6] COINVI TE^>yb—>*tt, 7*0*5/ 
*-/<K»bT K R B A P_R E Q t»)P»ll 

[006 7]^ yfe-5?0^3>te*fii»U i(*«rBBE 

vA7yy\t, -bvi/a y*— ^ffll^T INVITED 
•y-tr-i/1 1 OfcH^t 3<, Jfe^i:, IHi^ilO 20 
I NV I T E^yb-^fcfrifOtt, Opaquefei 
tfGssapi-dat affl%¥fcA*l, I NV I 
TE^y-t-^IHC+r-AtC&oT, co£=#fc* 

aTfe«ia (r7*;l/hTMi8l$IHI) , 7 7^f7yKD 

t» rjstyj £fc#T*t*;:fc£S«-fSo I n v i 

T E * 7 t-i/fcWZtZC fcT\ JB=#tf 0 p a q u 
efe«ktfG s s a p i - r d a t a*K9HltCk*K 
<♦£ fcttT-tftv^V St U> I N V l T E * 7 *-5>* 30 

[0068] 77^7yh7 2ti, MakeSigna 
ture AP I £llfflU Cft^fftftBLT, (40 
7 ^ -vfe-v^o p a q u e (McHffJSftfc) c<0«f tti 
LTttffl* n***a yf-{3yf*7 htC p h C o n 
t e x t£-b7 r-U ^(Drt^^igLTpM e s s a g 
efc#&**. COifffiLOffl^tt^ pMessage 

o+tssnfcs^^nrc^yt-^Tfes. 77^7 

yH2> £€>W££I NV I TE 1 1 OKifita**. M 
mZfttcl NV I TE^y-b-y'l 1 0*3tfB4fc, 
7n*y+r— A7 4(i, Proxy-Author iz 
a t i o n'N-y^'t'Oo p a q u effi£f-x77U 
R/i4©p h Contextl (f4<D-b*a'Jf 

7 4 H\ gssapi-rdat a*»9lHU Ac c 
eptSecur i tyCon^textAPI HtS^f 
tftB U proxy — authorization^ 7 50 



^Sftgs s a p i - r d a t afifcCOA P I H 
»<Dp I npu nS»o*Kait<:i:lcJ:oT» Ctl* 
ifto-y^nxti^a-yH 8 2^-fo 7-;l"^n^ 
*$>a-;H 8 2ti, 7n*yiDfi8i*-£ilfflLT+r 
-/W7 h*IMJIU 7y©lT-^r-?*5<}:tf-b7y 
a tbt. ^MDXt->"a-;H 8 2 ti> 

•b 7 •> a y*-£teffl LT 7 fe yr-Y 2 

(authenticator) £ft?ScU ^fT**© 

[0 0 6 9] b>f-f y-^A'COfXHc/UL 
/cif3\ yMDXt^a-;H 8 77-f7yr- 
©U 7XX h ©4>OfflSBIiE7 7 7**8* « 7 7 W-fe 
7 hStlT^S*^ WDXt^a-zH 8 2tt-b 

»r>3^-*ffifflu, ryot— i>yTj>r-$fr 

ZOMMZftQItb* *0tSS£* K e r b e r o s A 
pplication R e p 1 y (K R B_A P_R 
E P) ©(plciif 0 (HlfCfcoT^ AcceptSec 
uri tyContext ibWdiSft, S E C_E_ 
0 Kl'MStfilSft, byf-c^lipOu t p 
u t^777MtTCOAP I*iijit«o a-tf 
61I?n5t S I P7a*is/lsi/Zh7ltC(Di) 
7i*h*fflSU I NV I TE^-y-fe-^*, SIP 

y ^ 'j y ?m&±<D%<D* 7 7fc^ii-r s 0 

[0 0 7 0] 7d*->OS I P3y#-*:/Hi*^ 
T\ S I P*7-T 7yHC(E»t4*oyyfe-i 
ffl t T 7 n 4=- *> © * — b > r -i 7- * * 7 7 7 > He 
40 «U ZtllC&iTtyJTyhm-'^mUT'ZS 
mictZ, ^nfc0HT'tt, C<0>*7-fe-5W T20 

ookj ^7-b— y*r*^5o co^y-fe-: ftt, s i p 
yD+ytctcT^^nrcfeOTHiziv^ c«D2 0 0 

(SS«, I NV I TEU^X^HClS»UTi*HiU^ 
ifiEtSo S I P 7*0 ^ffitTcKgiM-rS 
tufc-b 7 -y 3 y*-*fflt^T c OJSSfcSfc-r SfcitT* 

[00 7 1] JtKBiWUrcfcfeD, byr-CT--^ 
its Proxy — Authentication-In 
format i o n'Vy ?<Dt£K&% 0 C(0^y^it 
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10 



20 



6K, *7-f7:/htf, COlSS*jEU^-b*a'Jrw 
3^r*Xhfc-aS*5fc»Oo p a q u efifcS 
tr. 

[0 0 7 2] 7>07-*Xf— ->3y±©S I P^^ 

4jyh72it, r2oooKj tv-b-i/Z&mz 

Proxy— Authentication— In 
f o r m a t i o n'vy^fcftf tHU Initial 
i zeSecur i tyContext fcf tiil" 0 p 
hC o n t e x tffilio p a q u eO't'OilC-t^ b£ 
ft % pInput^77rliresponse-dig 
es tlC-try bSftSo ^-^y^^/l^nX*: 

*~>lz£? TjfiSftfcBf8l*, * 7 7 > h <D* 'J ->'t 

f$Mtf-$Ll>K.i§n. C<DInitializeSec 
uri t y Co n t e x t ©"ftULti S E C_E_0 K 
«gU ^'7-Y7^h«, ^D*->^**-C*5i:fc* 
*03 o HSLftliMlfclCttj^ 7 >h lit $>"***!> 

4-9--/W^Efr1"* fcff ttfT'ZKWT*, C A 
N C E L £go T C ©if fcBtf&mT-e-? 5 **§4l\, 

[0073] Bcmwbrcwmt. mm\ ztmwic 

S I P^7^7VhAlEf-^*tJ^M NV I T 

n*>>fr50 4 0 7*y-fe-S/*KfSgLT^IET-*£ 
SiJ© I N V I T E£AttTJM3->t'J*T^?fiS£n3o 

7^7:/ Mi, yu*s/cai**wo I 

NV I TEK&g4BiEx-**£i&5i:i:fc-e*5o 
^•©fcJ6t;:^7^7yf7 2ti, s I POTTfflBtS 

f^7h*KDCl 7 6fr£8flrr*o £l^T?&gftB 
fiEr-**, SfcfcBMBLfcP r o x y-Au t h o r i 
z a t i o n 'J ^17, h'vy ?'tcAtl3o C t 
£<};o"t\ 7 p n^->A^7-<7>'h^4 0 7^+b>> ? 

fttttWt/"cBSE*^l^—>3yo«|-e«S I P7 

REGISTER sip: nicknemicrosoft.com SIP/2.0 
Via; SIP/2. 0/UDP www.xxx.yyy.zzz: 5060 
From: "Nick North" <sip:nicknemicrosoft.com> 
To: "Hark Mars" <sip:markmmarkmemicrosoft.com> 
Call-ID: 1 23456789@m icrosoft.com 
CSeq: 1 REGISTER 
Contact: <sip:l23.45.67.89:5060> 
Proxy-Authorization: Negotiate 

realm = "Microsoft RTC Service Provider", qop = "auth' 

fcbaed78902QWERTY", targetname = 

"server 1 doam i nA . o icrosof t . com" 
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* I pyn+Sotfifct), 2Ott±<0S I ?7a*i/t>\ Pf 

H5K**#«{fcSnfc<5r-x-e«u S I Pt? 
4 7 y Y (07 >7 Y * v y K 7°u * S 7 4 (DffilC SO 
<DS I P7n 2 0tffe(X S^O^n+i/ 

A\ I NV I TEtv-t-v'*&xktZ>mcty'<7y 
hOBE*«Mlk1"*. c<D«£lctt, ^5i'7>'h7 
2tf£f\ 04tMLT^DiWL/c|ili;7 , n-tX^e 
Tv 7^h^7>KS I P-9— /<7 4fcJtl/Citt*B 

ttts. ^y-(7yv^mihMks 7o w 

4tigS2<D7n*S/l 2 0(c I NV 1TE*29. £2 
O/a+^l 2 Oli^T', *-7-f7>Mc4 0 7f-V 
l^>*190£JM3o cmcjSa?LT^7^7>b«» 

%,2<r>7°u*y-$-^ i 2 offloyMax^-z^y 

7 h ^r#Ay/c Proxy — Author i zat i on 
'vy$r"£*"r*g"j4»TUM NV 1 TE 1 9 2££3o 

* ^ 7 y v ttmitmit. % 2 ©7"n* s/a* u 

IC I N V I T E 1 9 2 £$Tf „ 
[0 0 7 4] WTOKIfltt, ^;l^oX$ft«NTLM 

^•yt—^D-O^tU^lCfct^T, Proxy A 
uthenticate, Proxy Author i 
z a t i 0 nfcJ:cJf P roxy — Authentica 
tion Information^ E(0 <fc 3 K 

«ffl-r **»*KWf«iB*now*a«"f *. 1 6 «#m 

**. C©$— XT?8\ SIP*5-f7>h72tf, I* 

5^rMn71f-/^^r7 hSrlsfrP r o x y-A u t 
ho r i za t i o n 'N y ^£#t? R E G I S T E R 'J 
^XX h 2 0 0 . fiitf jfetttWLfclBSBIEOfefeO 
'J*xxh*£5. hfcS^T^-f 7 

T 7°n * ->*BIE1" 5 c fc tfT?* 5 7n * *ABRf- * 
£#ty Proxy — Authent icat ion— I 
nformat i o n'xy ?t t fete, 2 0 0OK^y 
■b-^2 0 2*£f, REG I STERfeJ:tf2 0 0O 
K * y -b-^OrtSOWSttTK^t. 
[00 7 5] 
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gssapidata = "34 
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User-Agent: Microsoft-RTC/1.0 
Content-Length: 0 
SIP/2.0 200 OK 

Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 
Proxy-Authentication-Info: Negotiate qop = auth, rspauth = "ABCD87564cvx 

srand = "9876543210" realm = "Microsoft RTC Service Provider" targetname 

"serveral . doaminA . microsof t . com" 

From: "Nick North" <sip:nicknemicrosoft.com> 
To: "Mark Mars" <sip:markm@m icrosoft.com> 
Call-ID: 123456789@ms.com 
CSeq: 1 REGISTER 

Contact: "Nick north" <sip:@www.xxx.yyy.zzz> 
User-Agent: Microsoft-RTC/1.0 
Content-Length: 0 

[0 0 7 6] fr;l/^nX^-X©**l/>$>K **at« 0 7u*Mis 7u*Z/&ft{CO^T<DWfeft 

Ml (challenged authenticat Proxy Authentication I 

i on) (Di/i-Vt^to COMTtt, 9y^C7>Y n f o rma t i on^7^lt5 F2 0 0OKJ * 
7 2tf*1\ P r o x y-A u thorization 20 y-fe-^2 l 2#iI1\> Proxy Authenti 
tl«*#*4v^ I N V I T E 2 0 6%7u*i/7 4 (CiS cation Informatio n^WOr 

£J§^t~S Proxy-Authenticate "\y f£> P r oxy-Au t ho r i z a t i o n^vy£*£ 
**£tM 0 7*y-fe-S>2 0 8£iM5 0 0 7^ MtZ>%>2<D I NV I T E 2 1 4^riH^ 0 CO^o-feT, 

Stir— ^^tyP roxy-Authorizati [0 077] 

on'NymtSREG I S T E R U h 2 1 0* 

SIP/2,0 407 Proxy Authorization Required 

Via: SIP/2. 0/UDP www.xxx.yyy.zzz: 5060 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip:markm@microsoft.com> 

Call- ID: 12345600@PCl.ms.com 

CSeq: l INVITE 

Proxy-Authenticate: Negotiate realm = "Microsoft RTC Service Provid 

er", 

targetriame = "serverl.doaminA.microsoft.com", qop = "auth" 
Contact : <s i p : 1 23 . 45 . 67 . 89 : 5060> 
User-Agent: Microsoft-RTC/1.0 
Content-Length: 0 

REGISTER sip:nickn@microsoft.com SIP/2.0 
Via: SIP/2. 0/UDP www.xxx.yyy.zzz: 5060 
From: "Nick North"" <sip:nickn@microsoft.com> 
To: "Mark Mars" <sip:markm@m icrosoft.com> 
Call-ID: 123456789@microsoft.com> 
CSeq: l REGISTER 
Contact: <sip:i23. 45. 67. 89:5060) 

Proxy-Authorization: Negotiate realm = "Microsoft RTC Service Provi 

der" , 

opaque = "ABC01234", qop = "auth", gssapi-data = "34fcbaed78902QWERTY" 
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31 32 
targetname = "serverl.domainA.microsoft.com" 
User-Agent: Microsoft-RTC/1.0 
Content-Length: 0 
SIP/2.0 200 OK 

Via: SIP/2.0/UDP www.xxx.yyy.zzz: 5060 
Proxy-Authentication-Info: Negotiate qop= "auth", rspauth = 
"ABCD87564cvx", srand = "9876543210" 

targetname = "serverl.doaminA.microsoft.com" realm = "Microsoft RTC Serv 
ice 

Provider", 

From = "Nick North" <sip: nickn@microsoft.com> 

To: "Mark Mars" <sip: markm@microsoft.com> 

Call-ID: 123456789@ms.com 

CSeq: 1 REGISTER 

Contact : <s i p : 1 23 . 45 . 67 . 89 : 5060> 

User-Agent: Microsoft-RTC/1.0 

Content-Length: 0 

[0 0 7 8] &fcB8*#BB1"5o ifeKSE^fefcio*), * P r o x y Authenticat e'W^^tt!) 

m Li^mBmrmmmiRv, ^^7> h • 7n %mi<o 4 o 7 i^y^ 2 2 6 7y hc& 

*2/EKKNTLM-b*aUx>rffl«l%ffiffl , r5i:il^ 20 5o *7>f7VH4*W -fe+a Ur * 7V fx-* 

■p*5o £5>f7:/htfS1\ !SSEt-#£ a >*Sl8*«&4©KiM?aBIET-**^trP r o x 

#£&IM NV I TE*yfe-S?2 2 0£iM>K y Au t ho r i z a t i o n^7^*^1"5B'JOR 

5/*<4 0 7*y-fe-S?*jI*o CO4 0 7^7-b-^2 EG I S T E R »J'£x* h 2 2 8 £2S5 0 ^n*S/1f- 
2 2C>P r o x y Authenticate^^ S2^R E G I S T E R 'J *XX hO+Or-* 

H\ BSE£j*LTNTLM%ffifflt4tfntf46ft^i: tcSo w ^T"tr+a Ut^77*x— >a 

fc*fi^-T5o »^^7^7yh^ N T L M7°n h 7u*i/\L^T<OW£r-*lttlt5? v o xy Au 

n;McS^< ^7^7> VOMlT-Z^StS? rox thent i cat ion Information^ 
y Au t hen t i c a t i on^y^tSRE T2 0 0OKJ ^7^2 3 2*igfo 

G I STER^7*-^2 2 4*3i*o T2 0 0OKJ / yfe-5>2 3 2©+©BKr-*KS 
[0 0 7 9] H4 0^1l«k:BB«LTftKa^fci:fe 30 ^T^5>f7> Mi7n^>£E!iEU *^1»9JOI 

0, *7>f7yhKJ:oTaS6tlfcBIEr->K:±-3 N V I T E * yt-z/Z 3 6 %2£5 0 CO^n-bXOffl 

T, 7 P n+S/ti^^^7>h%EIiE'r§Ci:^Tt* jSW^^yfe-^WFtS-To 

*\ COgBEr-*KS^^T'fe*ayr^7y^X-- [0 0 8 0] 

SIP/2.0 407 Proxy Authorization Required 
Via: SIP/2. 0/UDP . www . xxx . yyy . zzz : 5060 
From: "Nick North" <sip:nickn@microsoft.com> 
To: "Mark Mars" <sip:markffl@microsoft.com> 
Call-ID: 12345600@PCl.ms.com 
CSeq: 1 INVITE 

Proxy-Authenticate: NTLM realm = "Microsoft RTC service Provider", 
targetname = "server l.domainA. microsoft. com", 
opaque = "ABCD1234", qop = "auth", 

Contact: <sip:i23. 45. 67. 89:5060) 

User-Agent: Microsoft-RTC/1.0 

Content-Length: 0 
REGISTER sip: nickn@microsoft.com SIP/2.0 

Via: SIP/2. 0/UDP www. xxx. yyy. zzz: 5060 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip:markm@microsoft .com> 
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33 34 
Call-ID: 123456789@microsoft.com 
CSeq : 1 REGISTER 
Contact: <sip:i23. 45. 67.89:5060) 

Proxy-Authorization: NTLM realm = "Microsoft RTC Service Provider", 
opaque = "ABCD1234", qop = "auth", gssapi-data = "34fcbaed78902QWERTY" 
targetname = "serverl .domainA. microsoft. com" 

User-Agent : Microsof t-RTC/1 .0 

Content-Length: 0 
SIP/2.0 407 Proxy Authorization Required 

Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip: markm@microsoft.com> 

Call-ID: 12345600@PCl.ms.com 

CSeq: l INVITE 

Proxy-Authenticate: NTLM realm = "Microsoft RTC Service Provider", 
targetname = "served. domainA, microsoft. com", opaque="ABCD1234", qop = " 
auth", 

gssapi-data = "QWERTY789564NMJHKLasdcfg" 
Contact: <sip:i23. 45. 67. 89:5060) 
User-Agent: Microsof t-RTC/1 .0 
Content-Length: 0 
REGISTER sip:nickn@microsoft.com SIP/2.0 
Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 
From: "Nick North" <sip: nickn@microsoft.com) 
To: "Mark Mars" <sip: markm@microsoft.com> 
Call-ID: 123456789@microsoft.com 
CSeq: 2 REGISTER 

Contact : <sipH23.45.67.89: 5060> 

Proxy-Authorization: NTLM realm = "Microsoft RTC Service Provider", 

gssapi-data = "qqertyuioKMNF009876" opaque = "ABCD1234", qop = "auth", 
targetname = "serverl.domainA.microsoft.com" 

User-Agent: Microsof t-RTC/1 .0 

Content-Length: 0 
SIP/2.0 200 OK 

Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 

Proxy-Authentication- Info: NTLM realm = "Microsoft RTC Service Prov 
ider" qop = "auth", 

rspauth = "ABCD87564cvx" , srand = "9876543210" 
targetname = "serverl.domainA.microsoft.com" 

From: "Nick North" <sip: nickn@microsoft.com) 

To: "Mark Mars" <sip:markm@microsoft.com> 

Call-ID: 123456789@ms.com 

CSeq: 2 REGISTER 

Contact: <sip:i23. 45. 67. 89:5060) 
User-Agent: Microsoft-RTC/1 .0 
Content-Length: 0 
INVITE sip: markin@proxyl.wcom.com SIP/2.0 
Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 

Proxy-. Authorization: NTLM realm = "Microsoft RTC Service Provider" 
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» 

crand = "913082051", 

response = 12345ABCDEF78909BCADE56", opaque = "ABCD1234", qop = 
"auth", targetmane = "serverl.domainA.fflicrosoft.com" 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip: markm@microsoft.com) 

Call-ID: 12345601@PCl.ms.coni 

CSeq: 2 INVITE 

Contact: "Nick North" <sip: nickn@raicrosoft.com> 
User-Agent: Microsoft-RTC/l.O 
Content-Type: application/sdp 
Content-Length: xxx 

[00 8 1]H9fc, NTLM^-^©yUBEO^t * * 1/>S?2 4 2«Sto £^7yHi^?\ 

DX^-XOyUBKO*hC«Tt^**^ 4 0 7f-t NTLMgHr-^fc^trP roxy Author! 
b^fccfctfR EG I STER^7-b-^iIiP$nt z a t i on^y^tt8S20REG I STERU 
l^SjStfgfcSo SftWKti^7>T7yh*V NT LM ^xXh2 4 4££3 0 7o*5/»i#t^ Proxy 
%®Mt&Ct%1&7fiL, NTLMBKr-*%^&P Authentication Informatio 
roxy Authorizatio n^y^CR n££T3 T2 0 0OKJ *yfe-5?2 4 6£)Ito 7" 
EG I STER^y-t-^2 4 OfcitffflSBEOfcA 20 o*5/*BIEtfea, ^v47yY\Xl'u^y\z^2(T) 
<D»J*xXh£i3£S 0 yn*i/tt, SttKofeNTLM I NV I TE^yfe-^2 4 8££3o u<D7°a-t:X<D 
BEr-*KlS^T^7-<7y b*BEU Prox M^Wft^y-lr-^ft«TKS"ro 
y Authenticat e'W^fcWf 5 4 0 7** [0 0 8 2] 
REGISTER sip:nickn@microsoft.com SIP/2.0 

Via: SIP/2.0/UDP www.xxx.yyy.zzz: 5060 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip:markm@microsoft.com> 

Call-ID: 123456789@microsoft.com 

CSeq: l REGISTER 

Contact: <sip: 123.45.67.89:5060) 

Proxy-Authorization: NTLM realm = "Microsoft RTC Service Provider", 
opaque = "ABCD1234", qop = "auth", gssapi-data = "34fcbaed78902QWERTY", 
targetname = "serverl.dornainA.microsoft.com" 

User-Agent: Microsoft-RTC/l.O 

Content-Length: 0 
SIP/2.0 407 Proxy Authorization Required 

Via: SIP/2.0/UDP www.xxx.yyy.zzz: 5060 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip:markm@microsoft.com> 

Call-ID: 12345600@PCl.ms.com 

CSeq: 1 INVITE 

Proxy-Authenticate: NTLM realrm = "Microsoft RTC Service Provider", 
targetname = "serverl.domainA.microsoft.com", opaque = "ABCD1234", 
qop = "auth", 

gssapi-data = "QWERTY789564NMJHKLasdcfg", 
targetname= "server 1 .domainA.microsoft.com" 

Contact: <sip: 123.45.67.89:5060) 

User-Agent: Microsoft-RTC/l.O 

Content-Length: 0 
REGISTER sip: nickn@microsoft.com SIP/2.0 
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Via: SIP/2. 0/UDP www.xxx.yyy.zzz: 5060 
From: "Nick North" <sip: nickn@microsoft.com> 
To: "Mark Mars" <sip:markm@microsoft .com.) 
Call-ID: 123456789em icrosoft.com 
CSeq: 2 REGISTER 

Contact: <sip:i23.45.67.89:5060> 

Proxy-Authorization: NTLM realm = "Microsoft RTC Service Provider", 
gssapi-data = "qqertyuioKMNF009876" opaque = "ABCD1234", qop = "auth", 
targetname = "serverl.domainA.microsoft.com" 

User-Agent: Microsoft-RTC/1.0 

Content-Length: 0 
SIP/2.0 200 OK 

Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 

Proxy-Authentication-Info: NTLM qop = "auth", 
rspauth = "AECD87564cvx" , srand = "9876543210", 
targetname = "serverl.domainA.microsoft.com" 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip:markm@microsoft.com> 

Call-ID: 123456789@ms.com 

CSeq: 2 REGISTER 

Contact: <sip: 123.45.67.89:5060) 
User-Agent: Microsoft-RTC/1.0 
Content-Length: 0 
INVITE sip: markm@proxyl.wcom.com SIP/2.0 
Via: SIP/2. O/UDP www.xxx.yyy.zzz: 5060 

Proxy-Authorization: NTLM realm = "Microsoft RTC Service Provider", 
crand = "913082051", 

response = "12345ABCDEF78909BCADE56", opaque = "ABCD1234", qop "auth" ta 
rgetname = "serverl.domainA.microsoft.com" 

From: "Nick North" <sip:nickn@microsoft.com> 

To: "Mark Mars" <sip:markm@m icrosoft.com> 

Call-ID: 12345601@PCl.ms.com 

CSeq: 2 INVITE 

Contact: "Nick North" <sip:nickn@microsoft.com> 



^b~S/3>0^7t-v ? 7n-tCffi*iiA,t : \ SIP 

z/syj-yjL-i/syfub^ji (s i p) i/ZtL 

[03] S I PtyJjybtS I p-fv*yy-;^(D 



User-Agent: Microsoft-RTC/1.0 
Content-Type: application/sdp 
Content-Length: xxx 

[0083] *mi<Dwmzmmtszt&?zz&< 
x^wmmam i r&mmmtwntoz totjo 40 

^7x7 (£fc«77h*x7) fcLT^g-rSCfc*^ 
[0 0 8 4] 50 
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8 8 7-nT->3> 

9 0 i/9+Vym& 

9 6 4 0 7ftI/^7-b—>* 
102 F^^vnyFn-5 
108 -9— /WryF 
110 1 NV 1 TE^'y-t-: 7 
116 -t 7 •> a 
120 SIP7n*^-A 
30 1 2 2 2 0 00K^7-b— 7 

17 0, 172, 176 KDC 
= 1 8 0, 1 8 2 yMPXti/'a-/!/ 



[03] 



[06] 




72 \ 

9P4577K 



REGLSTER+ 
Proxy-Authorization 
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200 OK+Proxy- 
Autheruicatelnfo 
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206 



407 

Proxy- Authenticate 



REGISTER* 
Proxy-Authorization 



INVITE+ 
Proxy-Authorization 
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SIP* 7-T7>h 



REGISTER+ 
Proxy-Authorization 
(NTLM) 



407+ 
Proxy-Authenticate 



REGISTER* 
Proxy-Authorization 
(NTLM) 
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Proxy-Authorization 
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ZOO OK-Proxy 
Authenticateinfo 
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407+ 
Proxy-Authenticate 



REGISTER* 
Proxy- Authorization 
(NTLM) 
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REGISTER + 
Proxy-Authorization 
(NTLM) 
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Proxy-Authorization 
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